Peter - I don't see anything obvious in the script that could be problematic. What do you mean by "port forwarding not working"? Are you getting any error messages? Is translation being performed but the packets are not routed? I might be able to generate some ideas here if you can be more specific. By the way, I believe you are meaning to block the Auth protocol (port 113): that being the case, you need to specify TCP and not UDP. -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx]On Behalf Of Kleiner, Peter Sent: Wednesday, October 22, 2003 9:41 AM To: 'netfilter@xxxxxxxxxxxxxxxxxxx' Subject: Help with port forwarding Greetings, I have two PCs that, software-wise are reasonably identical. Both are RH9.0 with iptables 1.2.7a. I have a script to set the rules for masquerading and port forwarding. The script is identical, except that the internal address range is different. My problem is that port forwarding works on one PC and not the other. I've spent many hours trying to figure out what is wrong to no avail. I was wondering what other factors will affect iptables. Anyway, here is the info on the the two PCs, which I'll call PC1 and PC2. PC1 is the working one and PC2 is the non-working one. Both PCs have eth0 as internal and eth1 as external interfaces. I've put the info that I thought was relevant here: http://www.smbmicro.com/~kleinerp/iptables.txt Please let me know if you require anything else. Thanks in advance!!! Pete